cbcvebase.

Usersultra Users Ultra vulnerabilities

1 known vulnerability affecting usersultra/users_ultra.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-0769P1CRITICALCVSS 9.8ExploitedPoC≤ 3.1.02022-04-25
CVE-2022-0769 [CRITICAL] CWE-89 CVE-2022-0769: The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.
nvd
Usersultra Users Ultra vulnerabilities | cvebase